last executing test programs:

1m34.908269214s ago: executing program 1 (id=149):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa00000000000071106b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1m34.780312359s ago: executing program 1 (id=150):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)

1m34.700966884s ago: executing program 1 (id=151):
r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0)
lseek(r0, 0x50, 0x4)

1m34.649787882s ago: executing program 1 (id=153):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]})
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1021408, 0x0, 0x1, 0x0, &(0x7f0000006380))

1m34.380165128s ago: executing program 1 (id=157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'})

1m34.110910934s ago: executing program 1 (id=161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000806010300000000000000000a00000005000100070000000900020073797a3100000000050001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8)

1m33.447835281s ago: executing program 32 (id=161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000806010300000000000000000a00000005000100070000000900020073797a3100000000050001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8)

26.965863554s ago: executing program 2 (id=757):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="03020c"], 0xa, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)

26.965365016s ago: executing program 2 (id=758):
unshare(0x20000400)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

26.699963201s ago: executing program 2 (id=759):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034001"], 0xc0}}, 0x8040)

26.672271697s ago: executing program 2 (id=760):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x4, '\x00', @d})
mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

26.570583247s ago: executing program 2 (id=761):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000240), 0x3, 0x45c, &(0x7f0000000580)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105942, 0x5)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x4)
getdents(r0, 0x0, 0x54)

26.304590969s ago: executing program 2 (id=763):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

26.030946839s ago: executing program 33 (id=763):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3506, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1.743419425s ago: executing program 0 (id=970):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x9764, &(0x7f00000097c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0)

1.673939375s ago: executing program 3 (id=972):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000540)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_winnt}]}, 0xfd, 0x2b8, &(0x7f0000000280)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000002c0)=""/215, 0xd7)

1.673778912s ago: executing program 4 (id=973):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0, 0x0, 0x3}, 0x18)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
syz_open_dev$tty1(0xc, 0x4, 0x2)

1.532805165s ago: executing program 4 (id=974):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.53257902s ago: executing program 4 (id=975):
syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f000000a180)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010000000904000001020d0000052406000105a40000000d240f01feffffff000005000004241a"], 0x0)

1.313335208s ago: executing program 3 (id=976):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.268482095s ago: executing program 0 (id=977):
dup2(0xffffffffffffffff, 0xffffffffffffffff)

1.265721891s ago: executing program 3 (id=978):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="7e301f7e", 0x4}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}], 0x20}}], 0x1, 0x4000000)

1.063207154s ago: executing program 3 (id=979):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000004c0))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x0)

993.239413ms ago: executing program 0 (id=980):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc3, 0x80, 0x0, 0x4, 0x8, 0x0, 0x8}, 0xc)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x140, 0x0)

993.007091ms ago: executing program 0 (id=981):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0)

920.117941ms ago: executing program 3 (id=982):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe85)
truncate(&(0x7f0000000040)='./file1\x00', 0x3000001)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r2, 0x2007ffc)

918.232601ms ago: executing program 0 (id=983):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)

312.329591ms ago: executing program 4 (id=984):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

193.296256ms ago: executing program 4 (id=985):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

73.078305ms ago: executing program 4 (id=986):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2)
write$binfmt_misc(r1, &(0x7f0000000280), 0xff9d)
sendfile(r0, r1, &(0x7f0000000100), 0x2)
fcntl$addseals(r1, 0x409, 0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)

72.796837ms ago: executing program 0 (id=987):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f00000010c0)=""/4101)

0s ago: executing program 3 (id=988):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x92, 0x0, 0x1, 0x4000007})

kernel console output (not intermixed with test programs):

 85.854297][ T6206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.926759][ T6206] team0: Port device team_slave_0 added
[   85.937069][ T6206] team0: Port device team_slave_1 added
[   86.015966][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.018097][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.033870][ T6206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.049376][ T6206] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.051411][ T6206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.061955][ T6206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.075450][ T6292] loop0: detected capacity change from 0 to 512
[   86.091274][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.102442][ T6292] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.114720][ T6292] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[   86.177108][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.191279][ T6206] hsr_slave_0: entered promiscuous mode
[   86.209552][ T6206] hsr_slave_1: entered promiscuous mode
[   86.318494][   T33] audit: type=1804 audit(1762391884.154:2): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.191" name="/newroot/45/file0" dev="tmpfs" ino=251 res=1 errno=0
[   86.541546][ T6206] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.547912][ T6206] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.605522][ T6206] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.623943][ T6206] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.016498][   T24] cfg80211: failed to load regulatory.db
[   87.554224][ T5199] Bluetooth: hci2: command tx timeout
[   87.695982][ T6206] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.754480][ T6206] 8021q: adding VLAN 0 to HW filter on device team0
[   87.776562][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.779476][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.821601][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.824778][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.948102][ T6333] veth0: entered promiscuous mode
[   87.954530][ T6333] veth0: left promiscuous mode
[   88.326369][ T6349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.606919][ T6206] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.726700][ T6206] veth0_vlan: entered promiscuous mode
[   88.748864][ T6206] veth1_vlan: entered promiscuous mode
[   88.805729][ T6206] veth0_macvtap: entered promiscuous mode
[   88.815746][ T6206] veth1_macvtap: entered promiscuous mode
[   88.846052][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.859791][ T6206] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.875270][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.881937][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.885762][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.894111][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.034171][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.037815][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.121921][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.124846][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.401066][ T6367] netlink: 180 bytes leftover after parsing attributes in process `syz.3.206'.
[   89.411712][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'.
[   89.436364][ T6369] loop2: detected capacity change from 0 to 256
[   89.469706][ T6369] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   89.553648][ T6375] syz.3.212 uses obsolete (PF_INET,SOCK_PACKET)
[   89.644107][ T5199] Bluetooth: hci2: command tx timeout
[   90.443510][ T6401] netlink: 'syz.3.221': attribute type 10 has an invalid length.
[   90.453485][ T6401] team0: Port device dummy0 added
[   91.175319][ T6407] loop3: detected capacity change from 0 to 512
[   91.185422][ T6407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   91.190048][ T6407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   91.201729][ T6407] EXT4-fs (loop3): 1 truncate cleaned up
[   91.206243][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.223578][ T6206] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.336510][ T5971] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.379340][ T6419] loop3: detected capacity change from 0 to 4096
[   91.385571][ T6419] ntfs3: Unknown parameter '/dev/iommu'
[   91.443892][  T794] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.487549][ T5971] usb 1-1: Using ep0 maxpacket: 16
[   91.492523][ T5971] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[   91.495603][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.498001][ T5971] usb 1-1: Product: syz
[   91.499236][ T5971] usb 1-1: Manufacturer: syz
[   91.500592][ T5971] usb 1-1: SerialNumber: syz
[   91.532372][ T5971] r8152-cfgselector 1-1: Unknown version 0x0000
[   91.534853][ T5971] r8152-cfgselector 1-1: config 0 descriptor??
[   91.597050][  T794] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   91.600437][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.610353][  T794] usb 3-1: config 0 descriptor??
[   91.617688][  T794] gspca_main: spca508-2.14.0 probing 8086:0110
[   91.713909][ T5199] Bluetooth: hci2: command tx timeout
[   91.819095][  T794] gspca_spca508: reg_read err -32
[   91.821549][  T794] gspca_spca508: reg_read err -32
[   91.824241][  T794] gspca_spca508: reg_read err -32
[   91.942931][   T51] r8152-cfgselector 1-1: USB disconnect, device number 2
[   92.028406][  T794] gspca_spca508: reg_read err -71
[   92.032293][  T794] gspca_spca508: reg write: error -71
[   92.036107][  T794] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[   92.041520][  T794] usb 3-1: USB disconnect, device number 3
[   92.967772][ T6445] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.595718][ T5998] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.778658][ T5998] usb 4-1: Using ep0 maxpacket: 32
[   94.787353][ T5998] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[   94.789958][ T5998] usb 4-1: config 0 has no interface number 0
[   94.813061][ T5998] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[   94.824080][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.827095][ T5998] usb 4-1: Product: syz
[   94.831919][ T5998] usb 4-1: Manufacturer: syz
[   94.843823][ T5998] usb 4-1: SerialNumber: syz
[   94.855769][ T5998] usb 4-1: config 0 descriptor??
[   94.869833][ T5998] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[   94.913912][ T5950] Bluetooth: hci2: command 0x0405 tx timeout
[   95.068479][ T5998] gspca_sn9c2028: read1 error -71
[   95.071375][ T5998] gspca_sn9c2028: read1 error -71
[   95.073412][ T5998] gspca_sn9c2028: read1 error -71
[   95.075087][ T5998] sn9c2028 4-1:0.119: probe with driver sn9c2028 failed with error -71
[   95.079590][ T5998] usb 4-1: USB disconnect, device number 2
[   95.234034][   T24] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   95.396585][   T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[   95.399694][   T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[   95.402686][   T24] usb 3-1: config 0 has no interface number 0
[   95.405548][   T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   95.409754][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   95.414248][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   95.418336][   T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[   95.421605][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.427681][   T24] usb 3-1: config 0 descriptor??
[   95.430495][ T6482] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   95.902093][ T6496] loop3: detected capacity change from 0 to 4096
[   95.907549][ T6496] ntfs3: Invalid value for umask.
[   95.989563][ T6501] Invalid logical block size (2310)
[   96.048818][   T24] usb 3-1: USB disconnect, device number 4
[   96.058084][ T6504] dvmrp0: entered allmulticast mode
[   96.242754][ T6521] loop0: detected capacity change from 0 to 8
[   96.256622][ T6521] SQUASHFS error: xz decompression failed, data probably corrupt
[   96.259474][ T6521] SQUASHFS error: Failed to read block 0x108: -5
[   96.261698][ T6521] SQUASHFS error: Unable to read metadata cache entry [106]
[   96.266720][ T6521] SQUASHFS error: Unable to read inode 0x11f
[   96.319823][ T6524] netlink: 'syz.0.274': attribute type 2 has an invalid length.
[   96.493877][   T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   96.657766][   T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   96.660273][   T24] usb 4-1: config 0 has no interface number 0
[   96.662504][   T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[   96.665961][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.670028][   T24] usb 4-1: config 0 descriptor??
[   96.686488][   T24] usb 4-1: selecting invalid altsetting 1
[   96.690392][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[   96.692572][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   96.748726][   T24] DVB: Unable to find symbol cx22700_attach()
[   96.766272][   T24] DVB: Unable to find symbol tda10046_attach()
[   96.768329][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   96.905342][   T24] usb 4-1: USB disconnect, device number 3
[   97.368984][ T6546] loop0: detected capacity change from 0 to 512
[   97.393573][ T6546] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   97.527377][ T6554] bridge_slave_0: default FDB implementation only supports local addresses
[   97.724719][ T5998] IPVS: starting estimator thread 0...
[   97.726143][ T6567] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.290'.
[   97.730307][ T6567] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   97.774566][ T6572] program syz.2.294 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.833940][ T6568] IPVS: using max 63 ests per chain, 151200 per kthread
[   97.946422][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.961482][ T6581] team0: Port device bond1 added
[   98.008041][ T6588] loop2: detected capacity change from 0 to 128
[   98.106933][ T6590] syz.2.301: attempt to access beyond end of device
[   98.106933][ T6590] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128
[   98.145894][   T33] audit: type=1800 audit(1762391895.934:3): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.301" name="file1" dev="loop2" ino=1048642 res=0 errno=0
[   98.193862][ T5998] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   98.343871][ T5998] usb 4-1: Using ep0 maxpacket: 16
[   98.348286][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.352533][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.358754][ T5998] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   98.365712][ T5998] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   98.369239][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.378418][ T5998] usb 4-1: config 0 descriptor??
[   98.799064][ T6597] loop0: detected capacity change from 0 to 512
[   98.812345][ T6597] EXT4-fs: Ignoring removed nobh option
[   98.853939][ T6597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   98.887543][ T5998] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   98.913038][ T5998] microsoft 0003:045E:07DA.0002: no inputs found
[   98.916103][ T6597] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.302: iget: bad i_size value: 38620345925642
[   98.933045][ T5998] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[   98.940112][ T6597] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.302: couldn't read orphan inode 15 (err -117)
[   98.986694][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.035218][   T33] audit: type=1800 audit(1762391896.864:4): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.302" name="bus" dev="loop0" ino=18 res=0 errno=0
[   99.058205][ T6597] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.302: bg 0: block 5: invalid block bitmap
[   99.071568][   T51] usb 4-1: USB disconnect, device number 4
[   99.121179][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.427436][ T6623] bridge_slave_0: left allmulticast mode
[   99.429511][ T6623] bridge_slave_0: left promiscuous mode
[   99.431754][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.449804][ T6623] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   99.732235][ T6631] ip6gretap0: entered promiscuous mode
[   99.734909][ T6631] macsec1: entered promiscuous mode
[   99.745516][ T6631] ip6gretap0: left promiscuous mode
[  100.402126][ T6638] loop3: detected capacity change from 0 to 4096
[  100.602869][ T6647] loop0: detected capacity change from 0 to 2048
[  100.628582][ T6647] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  100.630925][ T6647] UDF-fs: Scanning with blocksize 512 failed
[  100.647448][ T6647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.720135][ T6653] loop2: detected capacity change from 0 to 4096
[  100.767607][ T6655] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.118467][ T6666] loop2: detected capacity change from 0 to 256
[  101.175203][ T6666] FAT-fs (loop2): Directory bread(block 64) failed
[  101.179572][ T6666] FAT-fs (loop2): Directory bread(block 65) failed
[  101.182278][ T6666] FAT-fs (loop2): Directory bread(block 66) failed
[  101.214800][ T6666] FAT-fs (loop2): Directory bread(block 67) failed
[  101.223454][ T6666] FAT-fs (loop2): Directory bread(block 68) failed
[  101.235013][ T6666] FAT-fs (loop2): Directory bread(block 69) failed
[  101.244637][ T6666] FAT-fs (loop2): Directory bread(block 70) failed
[  101.253521][ T6666] FAT-fs (loop2): Directory bread(block 71) failed
[  101.268937][ T6666] FAT-fs (loop2): Directory bread(block 72) failed
[  101.271552][ T6666] FAT-fs (loop2): Directory bread(block 73) failed
[  103.126614][ T6723] netlink: 164 bytes leftover after parsing attributes in process `syz.3.349'.
[  103.833814][  T793] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  104.007649][  T793] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  104.010697][  T793] usb 3-1: config 0 has no interface number 0
[  104.012891][  T793] usb 3-1: config 0 interface 49 has no altsetting 0
[  104.015808][  T793] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=c7.1b
[  104.019111][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.025824][  T793] usb 3-1: config 0 descriptor??
[  104.236632][  T793] usb 3-1: string descriptor 0 read error: -71
[  104.250786][  T793] usb 3-1: USB disconnect, device number 5
[  104.715984][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.829016][ T6761] loop2: detected capacity change from 0 to 2048
[  104.835061][ T6761] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  104.840311][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.873842][   T24] usb 4-1: Using ep0 maxpacket: 32
[  104.885175][   T24] usb 4-1: config 0 has an invalid interface number: 202 but max is 0
[  104.888598][   T24] usb 4-1: config 0 has no interface number 0
[  104.890880][   T24] usb 4-1: config 0 interface 202 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32
[  104.903879][   T24] usb 4-1: config 0 interface 202 has no altsetting 0
[  104.911169][   T24] usb 4-1: New USB device found, idVendor=86ba, idProduct=3fa1, bcdDevice=39.61
[  104.915611][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.918518][   T24] usb 4-1: Product: syz
[  104.919915][   T24] usb 4-1: Manufacturer: syz
[  104.921381][   T24] usb 4-1: SerialNumber: syz
[  104.925274][   T24] usb 4-1: config 0 descriptor??
[  104.927653][ T6748] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  104.933540][   T24] usb-storage 4-1:0.202: USB Mass Storage device detected
[  105.013917][  T793] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.142174][ T5998] usb 4-1: USB disconnect, device number 5
[  105.164157][  T793] usb 1-1: Using ep0 maxpacket: 32
[  105.170011][  T793] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  105.173242][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.176343][  T793] usb 1-1: Product: syz
[  105.177935][  T793] usb 1-1: Manufacturer: syz
[  105.179629][  T793] usb 1-1: SerialNumber: syz
[  105.308861][  T793] usb 1-1: config 0 descriptor??
[  105.318180][  T793] cdc_ether 1-1:0.0: More than one union descriptor, skipping ...
[  105.321033][  T793] usb 1-1: bad CDC descriptors
[  105.325216][  T793] usb 1-1: unsupported MDLM descriptors
[  105.596434][ T5998] usb 1-1: USB disconnect, device number 3
[  105.867921][ T6777] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  105.870033][ T6777] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  105.871975][ T6777] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  105.874319][ T6777] comedi comedi3: 8255: I/O port conflict (0x16,4)
[  105.876586][ T6777] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  105.878548][ T6777] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  105.881393][ T6777] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  105.883321][ T6777] comedi comedi3: 8255: I/O port conflict (0x13,4)
[  105.886248][ T6777] comedi comedi3: 8255: I/O port conflict (0xfd,4)
[  106.098124][ T6783] loop2: detected capacity change from 0 to 128
[  106.367045][ T6788] Zero length message leads to an empty skb
[  106.395052][ T6787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.555154][   T33] audit: type=1400 audit(1762391904.394:5): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6792 comm="syz.0.376"
[  106.640297][ T6801] netlink: 'syz.0.380': attribute type 2 has an invalid length.
[  106.738526][ T6809] loop2: detected capacity change from 0 to 128
[  106.748658][ T6809] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.758896][ T6809] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  106.791370][ T5947] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.113075][  T793] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  107.526334][  T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.529435][  T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  107.534283][  T793] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  107.544121][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  107.546856][  T793] usb 1-1: SerialNumber: syz
[  107.767321][  T793] usb 1-1: 0:2 : does not exist
[  107.789796][  T793] usb 1-1: USB disconnect, device number 4
[  107.897951][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.985118][ T6831] netlink: 64 bytes leftover after parsing attributes in process `syz.3.391'.
[  108.101716][ T6834] loop3: detected capacity change from 0 to 4096
[  108.219033][ T6834] ntfs3(loop3): ino=9, attr_set_size
[  108.587423][  T793] IPVS: starting estimator thread 0...
[  108.683872][ T6847] IPVS: using max 63 ests per chain, 151200 per kthread
[  108.814599][ T6853] binder: 6851:6853 ioctl c0306201 200000000040 returned -14
[  108.854060][ T5998] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.006255][ T5998] usb 1-1: config 0 interface 0 altsetting 146 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.010103][ T5998] usb 1-1: config 0 interface 0 altsetting 146 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  109.015763][ T5998] usb 1-1: config 0 interface 0 has no altsetting 0
[  109.018496][ T5998] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  109.021973][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.030525][ T5998] usb 1-1: config 0 descriptor??
[  109.466158][ T6858] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  109.469584][ T6858] cramfs: wrong magic
[  109.471924][ T5998] saitek 0003:06A3:0CCD.0003: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.0-1/input0
[  109.615998][ T6864] cgroup: fork rejected by pids controller in /syz3
[  109.674948][  T793] usb 1-1: USB disconnect, device number 5
[  109.769285][ T6870] loop2: detected capacity change from 0 to 1024
[  109.780045][ T6870] EXT4-fs (loop2): first meta block group too large: 33024 (group descriptor block count 1)
[  110.034075][ T5706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.326311][ T5706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.427312][ T5706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.515454][ T5706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.696319][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  110.702334][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  110.707775][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  110.720994][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  110.721729][ T5706] bridge_slave_1: left allmulticast mode
[  110.734835][ T5706] bridge_slave_1: left promiscuous mode
[  110.737154][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.745486][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  110.765773][ T6882] loop0: detected capacity change from 0 to 32768
[  110.786575][ T6882] jfs_mount: Mount Failure: superblock is corrupt!
[  110.789411][ T6882] Mount JFS Failure: -22
[  110.791086][ T6882] jfs_mount failed w/return code = -22
[  110.858081][ T5706] bridge_slave_0: left allmulticast mode
[  110.860193][ T5706] bridge_slave_0: left promiscuous mode
[  110.862372][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.114893][ T5706] dvmrp0 (unregistering): left allmulticast mode
[  111.254844][ T5706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.259816][ T5706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.264634][ T5706] bond0 (unregistering): Released all slaves
[  111.277952][ T6889] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  111.697671][ T5706] hsr_slave_0: left promiscuous mode
[  111.700110][ T5706] hsr_slave_1: left promiscuous mode
[  111.702451][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.706362][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.709632][ T5706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.711745][ T5706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.722703][ T5706] veth1_macvtap: left promiscuous mode
[  111.725882][ T5706] veth0_macvtap: left promiscuous mode
[  111.727584][ T5706] veth1_vlan: left promiscuous mode
[  111.729260][ T5706] veth0_vlan: left promiscuous mode
[  111.822551][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'.
[  112.134499][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  112.143430][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  112.151170][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  112.155290][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  112.158245][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  112.508769][ T5706] team0 (unregistering): Port device team_slave_1 removed
[  112.543267][ T5706] team0 (unregistering): Port device team_slave_0 removed
[  112.852490][ T5706] team0 (unregistering): Port device dummy0 removed
[  112.914818][ T5199] Bluetooth: hci2: command tx timeout
[  113.297703][ T6883] chnl_net:caif_netlink_parms(): no params data found
[  113.318214][ T6916] loop0: detected capacity change from 0 to 1764
[  113.709331][ T6929] iso9660: Corrupted directory entry in block 2 of inode 1920
[  113.889381][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.892032][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.895457][ T6883] bridge_slave_0: entered allmulticast mode
[  113.899168][ T6883] bridge_slave_0: entered promiscuous mode
[  113.903576][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.906358][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.908936][ T6883] bridge_slave_1: entered allmulticast mode
[  113.912246][ T6883] bridge_slave_1: entered promiscuous mode
[  113.921659][ T6909] chnl_net:caif_netlink_parms(): no params data found
[  113.964076][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.992493][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.028144][ T6883] team0: Port device team_slave_0 added
[  114.031011][ T5706] IPVS: stop unused estimator thread 0...
[  114.046632][ T6883] team0: Port device team_slave_1 added
[  114.160601][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.163448][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.184256][ T6909] bridge_slave_0: entered allmulticast mode
[  114.188021][ T6909] bridge_slave_0: entered promiscuous mode
[  114.194522][ T5199] Bluetooth: hci1: command tx timeout
[  114.199002][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.200994][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.219634][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.229795][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.234719][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.236995][ T6909] bridge_slave_1: entered allmulticast mode
[  114.239814][ T6909] bridge_slave_1: entered promiscuous mode
[  114.251521][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.254815][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.262678][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.263581][ T6940] loop0: detected capacity change from 0 to 4096
[  114.298096][ T6940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.326644][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.337534][ T6883] hsr_slave_0: entered promiscuous mode
[  114.340553][ T6883] hsr_slave_1: entered promiscuous mode
[  114.350783][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.462590][ T6909] team0: Port device team_slave_0 added
[  114.471538][ T6909] team0: Port device team_slave_1 added
[  115.007575][ T5199] Bluetooth: hci2: command tx timeout
[  115.045651][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.049706][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.059913][ T6909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.065951][ T6909] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.068501][ T6909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  115.079968][ T6909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.159501][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.271271][ T6909] hsr_slave_0: entered promiscuous mode
[  115.275455][ T6909] hsr_slave_1: entered promiscuous mode
[  115.278287][ T6909] debugfs: 'hsr0' already exists in 'hsr'
[  115.280576][ T6909] Cannot create hsr debugfs directory
[  115.482546][ T6954] loop0: detected capacity change from 0 to 32768
[  115.553054][ T6954] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.570111][ T6954] XFS (loop0): Ending clean mount
[  115.588144][ T6954] XFS (loop0): Quotacheck needed: Please wait.
[  115.639951][ T6954] XFS (loop0): Quotacheck: Done.
[  115.677774][ T5945] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.802554][ T6909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.929926][ T6909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.025912][ T6909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.097393][ T6909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.207526][ T6883] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  116.216608][ T6883] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  116.224794][ T6883] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  116.234472][ T6883] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  116.274312][ T5199] Bluetooth: hci1: command tx timeout
[  116.331702][ T6909] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  116.347529][ T6909] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  116.364992][ T6909] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  116.385168][ T6909] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  116.532973][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.539407][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[  116.596351][ T6883] 8021q: adding VLAN 0 to HW filter on device team0
[  116.603797][  T720] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.606268][  T720] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.614109][ T6909] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.621589][  T720] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.624181][  T720] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.660183][ T7018] netlink: 100 bytes leftover after parsing attributes in process `syz.0.435'.
[  116.663325][ T6909] 8021q: adding VLAN 0 to HW filter on device team0
[  116.680581][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.682917][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.693938][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.696220][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.723232][ T6909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  116.731901][ T6909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  116.838797][ T7028] loop0: detected capacity change from 0 to 2048
[  116.842733][ T7028] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  116.849816][ T7028] NILFS (loop0): mounting unchecked fs
[  116.851401][ T7028] NILFS (loop0): recovery required for readonly filesystem
[  116.855070][ T7028] NILFS (loop0): write access will be enabled during recovery
[  116.861136][ T7028] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  116.870668][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.873429][ T5812] udevd[5812]: incorrect nilfs2 checksum on /dev/loop0
[  116.889093][ T7028] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state
[  116.908954][ T6883] veth0_vlan: entered promiscuous mode
[  116.915597][ T5812] udevd[5812]: incorrect nilfs2 checksum on /dev/loop0
[  116.919707][ T6883] veth1_vlan: entered promiscuous mode
[  116.952180][ T6883] veth0_macvtap: entered promiscuous mode
[  116.961792][ T6883] veth1_macvtap: entered promiscuous mode
[  116.991196][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.001343][ T6909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.006708][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.019127][ T5939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.021986][ T5939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.025715][ T5939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.037023][ T5939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.074129][ T5199] Bluetooth: hci2: command tx timeout
[  117.090640][ T7036] loop0: detected capacity change from 0 to 512
[  117.131343][ T7036] EXT4-fs (loop0): 1 orphan inode deleted
[  117.134584][ T7036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.139369][ T7036] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.140824][ T6909] veth0_vlan: entered promiscuous mode
[  117.160358][  T720] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  117.167310][  T720] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u10:3: Failed to release dquot type 1
[  117.178464][ T6909] veth1_vlan: entered promiscuous mode
[  117.178906][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.196223][ T6829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.201202][ T6829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.268805][ T6829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.271967][ T6829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.297391][ T6909] veth0_macvtap: entered promiscuous mode
[  117.308277][ T6909] veth1_macvtap: entered promiscuous mode
[  117.345749][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.368958][ T6909] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.428847][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.429937][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.430155][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.430347][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.531033][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.535361][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.572650][ T7046] loop3: detected capacity change from 0 to 32768
[  117.578673][ T7046] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.411 (7046)
[  117.597029][ T7046] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.600823][ T7046] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  117.631266][  T720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.638274][  T720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.711405][ T7046] BTRFS info (device loop3): enabling ssd optimizations
[  117.715121][ T7046] BTRFS info (device loop3): turning on async discard
[  117.717579][ T7046] BTRFS info (device loop3): enabling free space tree
[  117.938444][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'.
[  118.060067][ T7079] loop2: detected capacity change from 0 to 16
[  118.097489][ T7079] erofs (device loop2): mounted with root inode @ nid 36.
[  118.143397][ T6883] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.354265][ T5199] Bluetooth: hci1: command tx timeout
[  118.479052][ T7095] loop3: detected capacity change from 0 to 1024
[  118.481492][ T7095] EXT4-fs: Ignoring removed nobh option
[  118.483288][ T7095] EXT4-fs: Ignoring removed bh option
[  118.503743][ T7095] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  118.522636][ T7095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.553188][ T7095] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.450: Allocating blocks 497-513 which overlap fs metadata
[  118.563429][ T7103] loop0: detected capacity change from 0 to 256
[  118.566150][ T7103] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  118.572916][ T7103] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.604228][ T7103] kAFS: unable to lookup cell ''
[  118.644656][ T6883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.163818][  T794] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  119.163935][ T5199] Bluetooth: hci2: command tx timeout
[  119.252680][ T7117] loop2: detected capacity change from 0 to 65
[  119.285434][ T7117] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  119.326201][  T794] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  119.330034][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.344473][  T794] usb 4-1: config 0 descriptor??
[  119.359376][  T794] cp210x 4-1:0.0: cp210x converter detected
[  119.888958][  T794] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71
[  120.106613][  T794] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  120.112601][  T794] usb 4-1: cp210x converter now attached to ttyUSB0
[  120.116991][  T794] usb 4-1: USB disconnect, device number 6
[  120.121257][  T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  120.124393][  T794] cp210x 4-1:0.0: device disconnected
[  120.443872][ T5199] Bluetooth: hci1: command tx timeout
[  120.858850][ T7145] netlink: 232 bytes leftover after parsing attributes in process `syz.2.476'.
[  120.971640][ T7149] loop2: detected capacity change from 0 to 4096
[  121.005005][ T7149] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  121.118592][ T7149] ntfs3(loop2): ino=0, attr_set_size
[  121.121596][ T7149] ntfs3(loop2): ino=0, attr_set_size
[  121.124263][ T7149] ntfs3(loop2): ino=0, attr_set_size
[  121.457848][ T7160] bpf: Bad value for 'uid'
[  121.722486][ T7176] x_tables: duplicate entry at hook 1
[  121.789373][ T7180] loop2: detected capacity change from 0 to 1024
[  121.825877][ T7180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.961395][ T7189] loop0: detected capacity change from 0 to 1024
[  122.005246][ T7180] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.493: Allocating blocks 497-513 which overlap fs metadata
[  122.018069][ T7179] EXT4-fs (loop2): pa ffff8881163d2bc8: logic 32, phys. 177, len 21
[  122.021171][ T7179] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  122.056897][ T6909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.176693][ T7196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'.
[  122.180059][ T7196] netlink: 88 bytes leftover after parsing attributes in process `syz.2.499'.
[  122.411701][ T7200] Driver unsupported XDP return value 0 on prog  (id 40) dev N/A, expect packet loss!
[  122.910457][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.503'.
[  122.913659][ T7205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.154990][   T29] hfsplus: b-tree write err: -5, ino 4
[  123.654805][ T7213] loop0: detected capacity change from 0 to 32768
[  123.680097][ T7213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.506 (7213)
[  123.740641][ T7213] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.769269][ T7213] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  124.516579][ T7213] BTRFS info (device loop0): enabling ssd optimizations
[  124.519156][ T7213] BTRFS info (device loop0): turning on async discard
[  124.521246][ T7213] BTRFS info (device loop0): enabling free space tree
[  124.585015][ T5945] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.980617][ T7250] loop0: detected capacity change from 0 to 256
[  125.006383][ T7250] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  125.036980][ T7252] use of bytesused == 0 is deprecated and will be removed in the future,
[  125.039693][ T7252] use the actual size instead.
[  125.363490][ T7261] loop0: detected capacity change from 0 to 4096
[  125.577058][ T7274] netlink: 'syz.2.524': attribute type 41 has an invalid length.
[  125.979360][ T7284] loop0: detected capacity change from 0 to 512
[  125.987939][ T7284] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.023195][ T7284] EXT4-fs (loop0): failed to initialize system zone (-117)
[  126.025953][ T7284] EXT4-fs (loop0): mount failed
[  126.106041][ T7289] vlan2: entered promiscuous mode
[  126.108102][ T7289] macvlan1: entered promiscuous mode
[  126.140725][ T7293] loop0: detected capacity change from 0 to 8
[  126.143416][ T7293] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  126.153272][ T7293] cramfs: Error -5 while decompressing!
[  126.156102][ T7293] cramfs: ffffffff998cef28(26)->ffff8881be92a000(4096)
[  126.158282][ T7293] cramfs: Error -3 while decompressing!
[  126.160005][ T7293] cramfs: ffffffff998cef42(26)->ffff8881beaf5000(4096)
[  126.162171][ T7293] cramfs: Error -3 while decompressing!
[  126.165407][ T7293] cramfs: ffffffff998cef5c(16)->ffff8881beaf4000(4096)
[  126.169766][ T7293] cramfs: Error -5 while decompressing!
[  126.173628][ T7293] cramfs: ffffffff998cef28(26)->ffff8881be92a000(4096)
[  126.176541][   T33] audit: type=1800 audit(2000000002.810:6): pid=7293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.531" name="file2" dev="loop0" ino=348 res=0 errno=0
[  126.300724][ T7301] loop0: detected capacity change from 0 to 1024
[  126.304205][ T7301] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  126.321528][ T7301] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.534: Invalid block bitmap block 0 in block_group 0
[  126.333506][ T7301] EXT4-fs (loop0): Remounting filesystem read-only
[  126.335903][ T7301] Quota error (device loop0): write_blk: dquota write failed
[  126.338252][ T7301] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  126.341284][ T7301] EXT4-fs (loop0): 1 orphan inode deleted
[  126.344123][ T7301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.365767][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.488338][  T794] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  126.510747][ T7309] loop9: detected capacity change from 0 to 7
[  126.523476][ T7309] Dev loop9: unable to read RDB block 7
[  126.526971][ T7309]  loop9: unable to read partition table
[  126.529230][ T7309] loop9: partition table beyond EOD, truncated
[  126.530993][ T7309] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[  126.635854][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64
[  126.645307][  T794] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  126.649212][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.652013][  T794] usb 4-1: Product: syz
[  126.653533][  T794] usb 4-1: Manufacturer: syz
[  126.655414][  T794] usb 4-1: SerialNumber: syz
[  126.659352][  T794] usb 4-1: config 0 descriptor??
[  126.754425][ T5276] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.015982][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  127.020325][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  127.024885][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  127.028550][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  127.035215][ T5276] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  127.038670][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.081736][  T794] usb 4-1: USB disconnect, device number 7
[  127.128805][ T5276] usb 1-1: config 0 descriptor??
[  127.567011][ T5276] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[  127.587833][ T5276] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  127.659918][ T7334] loop3: detected capacity change from 0 to 1
[  127.679199][ T7334] syz.3.548: attempt to access beyond end of device
[  127.679199][ T7334] loop3: rw=2048, sector=0, nr_sectors = 8 limit=1
[  127.684590][ T7334] SQUASHFS error: Failed to read block 0x0: -5
[  127.687532][ T7334] unable to read squashfs_super_block
[  128.485524][ T7350] loop2: detected capacity change from 0 to 2048
[  128.514453][ T7350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.533240][   T33] audit: type=1800 audit(2000000005.160:7): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.555" name="bus" dev="loop2" ino=18 res=0 errno=0
[  128.678874][ T5934] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  128.839458][ T6909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.846496][ T5934] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.853910][ T5934] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  128.857314][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  128.860735][ T5934] usb 4-1: Product: syz
[  128.861977][ T5934] usb 4-1: Manufacturer: syz
[  128.869450][ T5934] usb 4-1: SerialNumber: syz
[  128.984058][ T7362] capability: warning: `syz.2.559' uses deprecated v2 capabilities in a way that may be insecure
[  129.089179][ T5934] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  129.164666][ T7370] loop2: detected capacity change from 0 to 256
[  129.191246][ T7370] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  129.351472][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.358219][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.498313][ T7373] loop2: detected capacity change from 0 to 32768
[  129.531738][ T7373] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.581555][ T7373] XFS (loop2): Ending clean mount
[  129.587448][ T7373] XFS (loop2): Quotacheck needed: Please wait.
[  129.615100][ T7373] XFS (loop2): Quotacheck: Done.
[  129.797351][   T33] audit: type=1804 audit(2000000006.420:8): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.564" name="/newroot/64/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  129.843386][ T5276] usb 1-1: USB disconnect, device number 6
[  129.860441][  T794] usb 4-1: USB disconnect, device number 8
[  129.887026][  T794] usblp1: removed
[  129.951753][ T6909] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.308823][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'.
[  130.399839][ T7404] loop2: detected capacity change from 0 to 256
[  130.409377][ T7404] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  131.004980][ T7423] loop0: detected capacity change from 0 to 16
[  131.018229][ T7423] erofs (device loop0): mounted with root inode @ nid 36.
[  131.046773][   T57] erofs (device loop0): failed to decompress -26 in[46, 0] out[9000]
[  131.051771][ T7423] erofs (device loop0): failed to decompress -26 in[46, 4050] out[4096]
[  131.055076][ T7423] erofs (device loop0): read error -117 @ 0 of nid 89
[  131.106938][ T7426] loop0: detected capacity change from 0 to 1024
[  131.109292][ T7426] EXT4-fs: inline encryption not supported
[  131.111048][ T7426] EXT4-fs: Ignoring removed nobh option
[  131.112760][ T7426] EXT4-fs: Ignoring removed bh option
[  131.137351][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.169063][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.812863][ T7454] loop0: detected capacity change from 0 to 256
[  131.821361][ T7454] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d)
[  131.845338][ T7455] netlink: 52 bytes leftover after parsing attributes in process `syz.3.591'.
[  132.712558][ T7467] loop3: detected capacity change from 0 to 128
[  132.720441][ T7467] EXT4-fs: Ignoring removed nobh option
[  132.743391][ T7467] EXT4-fs (loop3): Invalid log block size: 4294967295
[  132.863231][ T7465] loop0: detected capacity change from 0 to 32768
[  132.911568][ T7465] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.943935][ T7465] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  132.952043][ T7465] XFS (loop0): Starting recovery (logdev: internal)
[  132.987080][ T7465] XFS (loop0): Ending recovery (logdev: internal)
[  133.044347][ T5945] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.077095][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  133.078897][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.218844][ T7482] loop2: detected capacity change from 0 to 32768
[  133.242409][ T7497] loop3: detected capacity change from 0 to 8
[  133.256160][ T7497] SQUASHFS error: zlib decompression failed, data probably corrupt
[  133.277031][ T7497] SQUASHFS error: Failed to read block 0x9b: -5
[  133.282601][ T7497] SQUASHFS error: Unable to read metadata cache entry [99]
[  133.289437][ T7497] SQUASHFS error: Unable to read inode 0x127
[  133.289483][ T7482] JBD2: Ignoring recovery information on journal
[  133.299008][ T7500] loop0: detected capacity change from 0 to 256
[  133.308604][ T7500] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  133.390508][ T7482] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  133.488984][   T33] audit: type=1800 audit(2000000010.120:9): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.605" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  133.533573][ T6909] ocfs2: Unmounting device (7,2) on (node local)
[  133.688001][ T7502] loop0: detected capacity change from 0 to 40427
[  133.699064][ T7502] F2FS-fs (loop0): build fault injection rate: 14
[  133.701030][ T7502] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  133.732932][ T7502] F2FS-fs (loop0): invalid crc value
[  133.746602][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  133.764230][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  133.791926][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[  133.796602][ T7524] bond0: invalid ARP target 0.0.0.0 specified for addition
[  133.798928][ T7524] bond0: option arp_ip_target: invalid value (0)
[  133.822517][ T7502] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.825691][ T7502] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  133.832176][ T7502] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  133.894468][ T7502] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  133.915302][ T7502] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  133.922989][ T7502] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  133.928438][ T7502] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  133.958875][ T5945] syz-executor: attempt to access beyond end of device
[  133.958875][ T5945] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  133.971029][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  133.971043][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.971048][ T5945] Call Trace:
[  133.971052][ T5945]  <TASK>
[  133.971056][ T5945]  dump_stack_lvl+0x189/0x250
[  133.971073][ T5945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.971083][ T5945]  ? __pfx_queue_work_on+0x10/0x10
[  133.971091][ T5945]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.971101][ T5945]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.971115][ T5945]  f2fs_handle_critical_error+0x37c/0x540
[  133.971130][ T5945]  f2fs_write_end_io+0x886/0xb60
[  133.971146][ T5945]  __submit_merged_bio+0x27a/0x6a0
[  133.971160][ T5945]  __submit_merged_write_cond+0x255/0x530
[  133.971173][ T5945]  f2fs_write_data_pages+0x261d/0x3000
[  133.971196][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.971263][ T5945]  ? __lock_acquire+0xab9/0xd20
[  133.971282][ T5945]  ? do_raw_spin_lock+0x121/0x290
[  133.971298][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  133.971308][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.971316][ T5945]  do_writepages+0x32e/0x550
[  133.971331][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  133.971343][ T5945]  filemap_fdatawrite+0x199/0x240
[  133.971353][ T5945]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.971390][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  133.971404][ T5945]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.971425][ T5945]  f2fs_write_checkpoint+0x93e/0x2440
[  133.971438][ T5945]  ? __lock_acquire+0xab9/0xd20
[  133.971462][ T5945]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.971494][ T5945]  kill_f2fs_super+0x2cc/0x6d0
[  133.971513][ T5945]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.971540][ T5945]  ? shrinker_free+0x2ce/0x3e0
[  133.971557][ T5945]  deactivate_locked_super+0xbc/0x130
[  133.971569][ T5945]  cleanup_mnt+0x425/0x4c0
[  133.971579][ T5945]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.971590][ T5945]  task_work_run+0x1d4/0x260
[  133.971603][ T5945]  ? __pfx_task_work_run+0x10/0x10
[  133.971619][ T5945]  ? __x64_sys_umount+0x122/0x160
[  133.971640][ T5945]  ? exit_to_user_mode_loop+0x40/0x130
[  133.971657][ T5945]  exit_to_user_mode_loop+0xe9/0x130
[  133.971670][ T5945]  do_syscall_64+0x2bd/0xfa0
[  133.971687][ T5945]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.971698][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.971706][ T5945]  ? exc_page_fault+0xab/0x100
[  133.971718][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.971731][ T5945] RIP: 0033:0x7fe7129902f7
[  133.971744][ T5945] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.971754][ T5945] RSP: 002b:00007ffe2e9b3308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.971768][ T5945] RAX: 0000000000000000 RBX: 00007fe712a11d7d RCX: 00007fe7129902f7
[  133.971777][ T5945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2e9b33c0
[  133.971785][ T5945] RBP: 00007ffe2e9b33c0 R08: 0000000000000000 R09: 0000000000000000
[  133.971793][ T5945] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2e9b4450
[  133.971801][ T5945] R13: 00007fe712a11d7d R14: 0000000000020ac4 R15: 00007ffe2e9b4490
[  133.971822][ T5945]  </TASK>
[  133.971826][ T5945] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  134.134395][ T5945] CPU: 1 UID: 0 PID: 5945 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  134.134413][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.134421][ T5945] Call Trace:
[  134.134426][ T5945]  <TASK>
[  134.134432][ T5945]  dump_stack_lvl+0x189/0x250
[  134.134457][ T5945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.134473][ T5945]  ? __pfx_queue_work_on+0x10/0x10
[  134.134485][ T5945]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.134500][ T5945]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  134.134525][ T5945]  f2fs_handle_critical_error+0x37c/0x540
[  134.134550][ T5945]  f2fs_write_end_io+0x886/0xb60
[  134.134579][ T5945]  __submit_merged_bio+0x27a/0x6a0
[  134.134602][ T5945]  __submit_merged_write_cond+0x255/0x530
[  134.134626][ T5945]  f2fs_write_data_pages+0x261d/0x3000
[  134.134669][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.134747][ T5945]  ? __lock_acquire+0xab9/0xd20
[  134.134767][ T5945]  ? do_raw_spin_lock+0x121/0x290
[  134.134793][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  134.134809][ T5945]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  134.134822][ T5945]  do_writepages+0x32e/0x550
[  134.134849][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  134.134869][ T5945]  filemap_fdatawrite+0x199/0x240
[  134.134885][ T5945]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  134.134945][ T5945]  ? do_raw_spin_unlock+0x4d/0x240
[  134.134964][ T5945]  f2fs_sync_dirty_inodes+0x31f/0x830
[  134.134991][ T5945]  f2fs_write_checkpoint+0x93e/0x2440
[  134.135005][ T5945]  ? __lock_acquire+0xab9/0xd20
[  134.135042][ T5945]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  134.135107][ T5945]  kill_f2fs_super+0x2cc/0x6d0
[  134.135128][ T5945]  ? __pfx_kill_f2fs_super+0x10/0x10
[  134.135157][ T5945]  ? shrinker_free+0x2ce/0x3e0
[  134.135173][ T5945]  deactivate_locked_super+0xbc/0x130
[  134.135191][ T5945]  cleanup_mnt+0x425/0x4c0
[  134.135205][ T5945]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.135262][ T5945]  task_work_run+0x1d4/0x260
[  134.135283][ T5945]  ? __pfx_task_work_run+0x10/0x10
[  134.135297][ T5945]  ? __x64_sys_umount+0x122/0x160
[  134.135317][ T5945]  ? exit_to_user_mode_loop+0x40/0x130
[  134.135332][ T5945]  exit_to_user_mode_loop+0xe9/0x130
[  134.135345][ T5945]  do_syscall_64+0x2bd/0xfa0
[  134.135361][ T5945]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.135376][ T5945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.135388][ T5945]  ? exc_page_fault+0xab/0x100
[  134.135406][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.135417][ T5945] RIP: 0033:0x7fe7129902f7
[  134.135430][ T5945] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  134.135440][ T5945] RSP: 002b:00007ffe2e9b3308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  134.135453][ T5945] RAX: 0000000000000000 RBX: 00007fe712a11d7d RCX: 00007fe7129902f7
[  134.135461][ T5945] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2e9b33c0
[  134.135468][ T5945] RBP: 00007ffe2e9b33c0 R08: 0000000000000000 R09: 0000000000000000
[  134.135474][ T5945] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2e9b4450
[  134.135482][ T5945] R13: 00007fe712a11d7d R14: 0000000000020ac4 R15: 00007ffe2e9b4490
[  134.135508][ T5945]  </TASK>
[  134.136778][ T5945] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  135.031196][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'.
[  135.101128][ T5934] kernel write not supported for file /cpu/0/msr (pid: 5934 comm: kworker/1:4)
[  135.172033][ T7601] loop3: detected capacity change from 0 to 1024
[  135.202789][ T7601] hfsplus: bad catalog entry type
[  135.228673][ T7603] loop2: detected capacity change from 0 to 1024
[  135.270109][ T7603] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  135.273010][ T7603] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  135.308967][ T1095] hfsplus: b-tree write err: -5, ino 4
[  136.073845][ T5934] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  136.103995][  T794] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  136.228410][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  136.231478][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.234980][ T5934] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  136.238209][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.242021][ T5934] usb 1-1: config 0 descriptor??
[  136.277371][  T794] usb 3-1: Using ep0 maxpacket: 8
[  136.285361][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.288466][  T794] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  136.291636][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.297363][  T794] usb 3-1: config 0 descriptor??
[  136.506460][  T794] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  136.660424][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.662915][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.666224][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.668595][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.670712][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.672718][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.675050][ T5934] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[  136.679195][ T5934] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0
[  136.718755][   T10] usb 3-1: USB disconnect, device number 6
[  136.720564][    C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  136.859281][ T5934] isku 0003:1E7D:319C.0005: couldn't init struct isku_device
[  136.863863][ T5934] isku 0003:1E7D:319C.0005: couldn't install keyboard
[  136.867974][ T5934] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -71
[  136.874123][ T5934] usb 1-1: USB disconnect, device number 7
[  137.370540][ T7638] team_slave_0: entered promiscuous mode
[  137.372429][ T7638] team_slave_1: entered promiscuous mode
[  137.375709][ T7638] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  137.378063][ T7638] team0: Device macvtap1 is already an upper device of the team interface
[  137.395738][ T7638] team_slave_0: left promiscuous mode
[  137.397683][ T7638] team_slave_1: left promiscuous mode
[  137.448536][ T7642] loop0: detected capacity change from 0 to 128
[  137.460770][ T7642] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  137.466509][ T7642] hpfs: filesystem error: improperly stopped
[  137.469385][ T7642] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  137.472128][ T7642] hpfs: You really don't want any checks? You are crazy...
[  137.482675][ T7642] hpfs: hpfs_map_sector(): read error
[  137.487733][ T7642] hpfs: code page support is disabled
[  137.493515][ T7642] hpfs: hpfs_map_4sectors(): unaligned read
[  137.497051][ T7642] hpfs: hpfs_map_4sectors(): unaligned read
[  137.499232][ T7642] hpfs: filesystem error: unable to find root dir
[  137.520520][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.2.648'.
[  137.650006][ T7648] loop3: detected capacity change from 0 to 2048
[  137.690086][ T7647] loop2: detected capacity change from 0 to 4096
[  137.693666][ T7647] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  137.695863][ T7651] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.761384][ T7653] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[  137.830291][ T7655] loop0: detected capacity change from 0 to 512
[  137.843648][ T7655] EXT4-fs: Ignoring removed oldalloc option
[  137.899224][ T7655] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.653: dx entry: limit 1024 != root limit 124
[  137.904222][ T7655] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.653: Corrupt directory, running e2fsck is recommended
[  137.910219][ T7655] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  137.913346][ T7655] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.653: corrupted in-inode xattr: invalid ea_ino
[  137.918893][ T7655] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.653: couldn't read orphan inode 15 (err -117)
[  137.922643][ T7647] ntfs3(loop2): ino=19, mi_enum_attr
[  137.924915][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.926864][ T7647] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  138.075903][ T7658] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  138.217703][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.331478][   T33] audit: type=1804 audit(2000000014.960:10): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.649" name="/newroot/97/file0/file0" dev="loop2" ino=0 res=1 errno=0
[  138.603992][ T5276] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  138.677728][ T7664] loop3: detected capacity change from 0 to 2048
[  138.730255][ T7664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  138.758095][ T5276] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  138.762549][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.766809][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.771511][ T5276] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  138.772435][ T7664] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  138.777703][ T5276] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  138.787189][ T5276] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  138.787761][ T7664] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  138.790032][ T5276] usb 1-1: Manufacturer: syz
[  138.801274][ T7664] EXT4-fs (loop3): This should not happen!! Data will be lost
[  138.801274][ T7664] 
[  138.802071][ T5276] usb 1-1: config 0 descriptor??
[  138.808180][ T7664] EXT4-fs (loop3): Total free blocks count 0
[  138.810426][ T7664] EXT4-fs (loop3): Free/Dirty block details
[  138.828603][ T7664] EXT4-fs (loop3): free_blocks=2415919104
[  138.830892][ T7664] EXT4-fs (loop3): dirty_blocks=16
[  138.832791][ T7664] EXT4-fs (loop3): Block reservation details
[  138.838626][ T7664] EXT4-fs (loop3): i_reserved_data_blocks=1
[  138.850654][ T7668] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  139.250290][ T5276] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[  139.287571][ T5276] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  139.622158][ T7687] netlink: 'syz.3.664': attribute type 2 has an invalid length.
[  139.727364][ T7693] netlink: 'syz.2.667': attribute type 7 has an invalid length.
[  139.729687][ T7693] netlink: 'syz.2.667': attribute type 8 has an invalid length.
[  139.935663][ T7699] loop2: detected capacity change from 0 to 512
[  139.948487][ T7699] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.670: inode has both inline data and extents flags
[  139.952401][ T7699] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.670: couldn't read orphan inode 15 (err -117)
[  139.962001][ T7699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.014897][ T7695] loop3: detected capacity change from 0 to 40427
[  140.022721][ T7695] F2FS-fs (loop3): invalid crc value
[  140.105352][ T7695] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.109237][ T7695] F2FS-fs (loop3): Start checkpoint disabled!
[  140.119502][ T7695] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  140.123029][ T7695] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  140.132039][ T6909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.204057][ T6829] kworker/u9:5: attempt to access beyond end of device
[  140.204057][ T6829] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.212704][ T6829] CPU: 0 UID: 0 PID: 6829 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  140.212717][ T6829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.212722][ T6829] Workqueue: writeback wb_workfn (flush-7:3)
[  140.212737][ T6829] Call Trace:
[  140.212741][ T6829]  <TASK>
[  140.212776][ T6829]  dump_stack_lvl+0x189/0x250
[  140.212791][ T6829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.212801][ T6829]  ? __pfx_queue_work_on+0x10/0x10
[  140.212809][ T6829]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.212820][ T6829]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.212834][ T6829]  f2fs_handle_critical_error+0x37c/0x540
[  140.212849][ T6829]  f2fs_write_end_io+0x886/0xb60
[  140.212865][ T6829]  __submit_merged_bio+0x27a/0x6a0
[  140.212878][ T6829]  __submit_merged_write_cond+0x255/0x530
[  140.212891][ T6829]  f2fs_write_data_pages+0x261d/0x3000
[  140.212913][ T6829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.212930][ T6829]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  140.212957][ T6829]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  140.212968][ T6829]  ? look_up_lock_class+0x74/0x170
[  140.212982][ T6829]  ? trace_f2fs_writepages+0x7f/0x200
[  140.212992][ T6829]  ? f2fs_write_node_pages+0x478/0x6e0
[  140.213007][ T6829]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  140.213023][ T6829]  ? __lock_acquire+0xab9/0xd20
[  140.213038][ T6829]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.213049][ T6829]  do_writepages+0x32e/0x550
[  140.213067][ T6829]  ? reacquire_held_locks+0x127/0x1d0
[  140.213080][ T6829]  ? writeback_sb_inodes+0x384/0x1010
[  140.213094][ T6829]  __writeback_single_inode+0x145/0xff0
[  140.213105][ T6829]  ? do_raw_spin_unlock+0x4d/0x240
[  140.213116][ T6829]  writeback_sb_inodes+0x6c7/0x1010
[  140.213138][ T6829]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  140.213166][ T6829]  ? rcu_is_watching+0x15/0xb0
[  140.213179][ T6829]  wb_writeback+0x43b/0xaf0
[  140.213192][ T6829]  ? queue_io+0x311/0x590
[  140.213203][ T6829]  ? __pfx_wb_writeback+0x10/0x10
[  140.213217][ T6829]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.213228][ T6829]  wb_workfn+0x409/0xef0
[  140.213243][ T6829]  ? __pfx_wb_workfn+0x10/0x10
[  140.213253][ T6829]  ? __lock_acquire+0xab9/0xd20
[  140.213265][ T6829]  ? process_scheduled_works+0x9ef/0x17b0
[  140.213276][ T6829]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.213283][ T6829]  ? process_scheduled_works+0x9ef/0x17b0
[  140.213290][ T6829]  ? process_scheduled_works+0x9ef/0x17b0
[  140.213299][ T6829]  process_scheduled_works+0xae1/0x17b0
[  140.213319][ T6829]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.213335][ T6829]  worker_thread+0x8a0/0xda0
[  140.213344][ T6829]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.213356][ T6829]  ? __kthread_parkme+0x7b/0x200
[  140.213369][ T6829]  kthread+0x711/0x8a0
[  140.213380][ T6829]  ? __pfx_worker_thread+0x10/0x10
[  140.213388][ T6829]  ? __pfx_kthread+0x10/0x10
[  140.213398][ T6829]  ? _raw_spin_unlock_irq+0x23/0x50
[  140.213406][ T6829]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.213414][ T6829]  ? __pfx_kthread+0x10/0x10
[  140.213424][ T6829]  ret_from_fork+0x4bc/0x870
[  140.213433][ T6829]  ? __pfx_ret_from_fork+0x10/0x10
[  140.213444][ T6829]  ? __switch_to_asm+0x39/0x70
[  140.213450][ T6829]  ? __switch_to_asm+0x33/0x70
[  140.213455][ T6829]  ? __pfx_kthread+0x10/0x10
[  140.213465][ T6829]  ret_from_fork_asm+0x1a/0x30
[  140.213479][ T6829]  </TASK>
[  140.213527][ T6829] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  141.368580][ T5276] usb 1-1: USB disconnect, device number 8
[  142.226512][ T7726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  142.237795][ T7726] block device autoloading is deprecated and will be removed.
[  142.266164][ T7731] loop3: detected capacity change from 0 to 512
[  142.268875][ T7731] EXT4-fs: Ignoring removed bh option
[  142.276166][ T7731] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  142.279461][ T7731] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  142.286310][ T7731] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  142.290405][ T7731] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  142.297434][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.531560][   T33] audit: type=1800 audit(2000000019.160:11): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.681" name="file1" dev="loop3" ino=15 res=0 errno=0
[  142.708198][ T7753] loop2: detected capacity change from 0 to 1024
[  142.711854][ T7753] EXT4-fs: Ignoring removed orlov option
[  142.928197][ T7753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.936379][   T33] audit: type=1800 audit(2000000019.570:12): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.689" name="bus" dev="loop2" ino=18 res=0 errno=0
[  142.945131][ T7753] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.689: Allocating blocks 497-513 which overlap fs metadata
[  142.950743][ T7753] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[  142.975100][ T6909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.207937][ T6883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.387718][ T7770] loop0: detected capacity change from 0 to 128
[  143.445990][ T7770] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.459981][ T7770] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  143.520256][ T7770] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop0' because it doesn't have stable inode numbers
[  143.661617][ T7775] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  143.921094][ T5945] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.271374][ T7788] loop2: detected capacity change from 0 to 256
[  144.311980][ T7788] FAT-fs (loop2): Directory bread(block 64) failed
[  144.325040][ T7788] FAT-fs (loop2): Directory bread(block 65) failed
[  144.327495][ T7788] FAT-fs (loop2): Directory bread(block 66) failed
[  144.329764][ T7788] FAT-fs (loop2): Directory bread(block 67) failed
[  144.332245][ T7788] FAT-fs (loop2): Directory bread(block 68) failed
[  144.339806][ T7788] FAT-fs (loop2): Directory bread(block 69) failed
[  144.342006][ T7788] FAT-fs (loop2): Directory bread(block 70) failed
[  144.345839][ T7788] FAT-fs (loop2): Directory bread(block 71) failed
[  144.354295][ T7788] FAT-fs (loop2): Directory bread(block 72) failed
[  144.356181][ T7788] FAT-fs (loop2): Directory bread(block 73) failed
[  144.370867][ T7794] openvswitch: netlink: Message has 572 unknown bytes.
[  144.373197][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.419450][   T33] audit: type=1800 audit(2000000021.050:13): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.705" name="file1" dev="loop2" ino=1048661 res=0 errno=0
[  144.587741][ T7792] loop3: detected capacity change from 0 to 32768
[  144.592480][ T7792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.706 (7792)
[  144.608039][ T7802] loop2: detected capacity change from 0 to 1024
[  144.617576][ T7792] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.620677][ T7792] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  144.676292][ T7580] hfsplus: b-tree write err: -5, ino 4
[  144.788749][ T7792] BTRFS info (device loop3): enabling ssd optimizations
[  144.790860][ T7792] BTRFS info (device loop3): turning on async discard
[  144.793118][ T7792] BTRFS info (device loop3): enabling free space tree
[  144.880029][ T6883] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.977657][ T7817] loop2: detected capacity change from 0 to 32768
[  145.041792][ T7817] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.102059][ T7817] XFS (loop2): Ending clean mount
[  145.111068][ T7817] XFS (loop2): Quotacheck needed: Please wait.
[  145.170903][ T7817] XFS (loop2): Quotacheck: Done.
[  145.448921][ T6909] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.562099][ T7838] loop0: detected capacity change from 0 to 32768
[  145.587508][ T7838] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.629998][ T7838] XFS (loop0): Ending clean mount
[  145.665529][ T5945] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.886928][ T7865] loop0: detected capacity change from 0 to 512
[  145.912798][ T7865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.918529][ T7865] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.960033][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.987781][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  146.036753][ T7869] loop3: detected capacity change from 0 to 2048
[  146.047052][ T7869] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  146.059056][ T5906] udevd[5906]: incorrect nilfs2 checksum on /dev/loop3
[  146.075835][ T5906] udevd[5906]: incorrect nilfs2 checksum on /dev/loop3
[  146.086912][ T7872] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.097232][   T33] audit: type=1800 audit(2000000022.730:14): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.727" name="file1" dev="loop3" ino=15 res=0 errno=0
[  146.143857][   T10] usb 3-1: Using ep0 maxpacket: 16
[  146.147934][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  146.155478][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  146.176581][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.179395][   T10] usb 3-1: Product: syz
[  146.180689][   T10] usb 3-1: Manufacturer: syz
[  146.182322][   T10] usb 3-1: SerialNumber: syz
[  146.185957][   T10] usb 3-1: config 0 descriptor??
[  146.193114][   T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  146.197198][   T10] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  146.283886][ T5971] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  146.587360][ T7879] vxfs: WRONG superblock magic 00000000 at 1
[  146.591034][ T7879] vxfs: WRONG superblock magic 00000000 at 8
[  146.593529][ T7879] vxfs: can't find superblock.
[  146.634150][ T7879] loop3: detected capacity change from 0 to 2048
[  146.659784][ T7879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.720298][ T5971] usb 1-1: not running at top speed; connect to a high speed hub
[  146.726400][ T5971] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  146.728990][ T5971] usb 1-1: config 1 has no interface number 1
[  146.730777][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  146.739764][ T7876] ceph: No mds server is up or the cluster is laggy
[  146.746822][  T793] libceph: connect (1)[c::]:6789 error -101
[  146.753175][ T5971] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.753374][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  146.759993][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.762338][ T5971] usb 1-1: Product: syz
[  146.768804][ T5971] usb 1-1: Manufacturer: syz
[  146.770505][ T5971] usb 1-1: SerialNumber: syz
[  146.926206][   T10] em28xx 3-1:0.0: chip ID is em2765
[  146.998187][ T5971] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  147.002815][ T5971] usb 1-1: failed to enable PITCH for EP 0x82
[  147.024938][ T5971] usb 1-1: USB disconnect, device number 9
[  147.058554][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.503322][ T7893] netlink: 'syz.3.734': attribute type 1 has an invalid length.
[  147.509111][ T7893] netlink: 228 bytes leftover after parsing attributes in process `syz.3.734'.
[  147.512453][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'.
[  147.544305][   T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  147.546447][ T7895] loop0: detected capacity change from 0 to 512
[  147.547283][   T10] em28xx 3-1:0.0: board has no eeprom
[  147.551071][ T7895] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  147.570777][ T7895] EXT4-fs (loop0): 1 truncate cleaned up
[  147.573105][ T7895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.627648][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.645009][ T7859] em28xx 3-1:0.0: reading from i2c device at 0xfffe failed (error=-5)
[  148.683988][   T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  148.687245][   T10] em28xx 3-1:0.0: dvb set to bulk mode.
[  148.690172][ T5971] em28xx 3-1:0.0: Binding DVB extension
[  148.706303][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'.
[  148.710163][   T10] usb 3-1: USB disconnect, device number 7
[  148.733644][   T10] em28xx 3-1:0.0: Disconnecting em28xx
[  148.747365][ T5971] em28xx 3-1:0.0: Registering input extension
[  148.749573][   T10] em28xx 3-1:0.0: Closing input extension
[  148.897276][   T10] em28xx 3-1:0.0: Freeing device
[  149.052392][ T7935] loop3: detected capacity change from 0 to 4096
[  149.055890][ T7935] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  149.086554][ T7935] ntfs3(loop3): Failed to load root (-22).
[  149.740336][ T7958] loop2: detected capacity change from 0 to 512
[  149.744366][ T7958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  149.750820][ T7958] EXT4-fs (loop2): 1 truncate cleaned up
[  149.757336][ T7958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.775355][ T7958] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #2: block 13: comm syz.2.760: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  149.785460][ T7958] EXT4-fs (loop2): Remounting filesystem read-only
[  149.790562][ T7958] overlayfs: failed to create directory ./bus/work (errno: 30); mounting read-only
[  149.799365][ T7958] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null.
[  150.066763][ T6909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.102443][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.122908][ T7961] bridge0: port 3(vlan2) entered blocking state
[  150.126285][ T7961] bridge0: port 3(vlan2) entered disabled state
[  150.128958][ T7961] vlan2: entered allmulticast mode
[  150.130833][ T7961] bridge0: entered allmulticast mode
[  150.177575][ T7961] vlan2: left allmulticast mode
[  150.177611][ T7961] bridge0: left allmulticast mode
[  150.257141][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.325083][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.403614][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.417442][ T7965] loop3: detected capacity change from 0 to 512
[  150.448406][ T7965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.460055][ T7965] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.506726][ T6883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.609601][   T13] bridge_slave_1: left allmulticast mode
[  150.613184][   T13] bridge_slave_1: left promiscuous mode
[  150.615856][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.630838][   T13] bridge_slave_0: left allmulticast mode
[  150.632552][   T13] bridge_slave_0: left promiscuous mode
[  150.634815][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.730330][ T7972] loop3: detected capacity change from 0 to 2048
[  150.741308][ T7972] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  150.751306][ T7972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.808879][ T5199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.814901][ T5199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.819151][ T5199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.822670][ T5199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.827998][ T5199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.930877][ T7970] loop0: detected capacity change from 0 to 32768
[  150.951816][ T7970] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.767 (7970)
[  150.977496][ T7970] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.981334][ T7970] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  151.058827][ T7970] BTRFS info (device loop0): rebuilding free space tree
[  151.134351][ T7970] BTRFS info (device loop0): disabling free space tree
[  151.137416][ T7970] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.141293][ T7970] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.153610][ T7970] BTRFS info (device loop0): enabling ssd optimizations
[  151.157098][ T7970] BTRFS info (device loop0): turning on sync discard
[  151.160450][ T7970] BTRFS info (device loop0): force clearing of disk cache
[  151.214539][   T33] audit: type=1800 audit(2000000027.840:15): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.767" name="file1" dev="loop0" ino=260 res=0 errno=0
[  151.304961][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.310831][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.317116][   T13] bond0 (unregistering): Released all slaves
[  151.367836][ T7970] BTRFS info (device loop0): balance: start -susage=4095,vrange=0..524296
[  151.371377][ T7970] BTRFS info (device loop0): balance: ended with status: 0
[  151.472568][ T5945] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  152.025556][   T13] hsr_slave_0: left promiscuous mode
[  152.058142][   T13] hsr_slave_1: left promiscuous mode
[  152.061136][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.064687][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.068209][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.071015][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.094457][   T13] veth1_macvtap: left promiscuous mode
[  152.096743][   T13] veth0_macvtap: left promiscuous mode
[  152.099017][   T13] veth1_vlan: left promiscuous mode
[  152.101246][   T13] veth0_vlan: left promiscuous mode
[  152.193951][ T8011] loop3: detected capacity change from 0 to 32768
[  152.224329][ T8011] (syz.3.773,8011,0):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  152.227481][ T8011] (syz.3.773,8011,0):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  152.242632][ T8011] (syz.3.773,8011,0):ocfs2_check_volume:2420 ERROR: status = -13
[  152.246056][ T8011] (syz.3.773,8011,0):ocfs2_check_volume:2432 ERROR: status = -13
[  152.248924][ T8011] (syz.3.773,8011,0):ocfs2_mount_volume:1764 ERROR: status = -13
[  152.282685][ T8011] (syz.3.773,8011,0):ocfs2_fill_super:1177 ERROR: status = -13
[  152.678139][   T13] team0 (unregistering): Port device team_slave_1 removed
[  152.718144][ T8020] loop3: detected capacity change from 0 to 32768
[  152.722228][   T13] team0 (unregistering): Port device team_slave_0 removed
[  152.753004][ T8020] JBD2: Ignoring recovery information on journal
[  152.827651][ T8020] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  152.878760][ T6883] ocfs2: Unmounting device (7,3) on (node local)
[  152.914001][ T5950] Bluetooth: hci1: command tx timeout
[  153.476619][ T7974] chnl_net:caif_netlink_parms(): no params data found
[  153.646681][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.648699][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.651183][ T7974] bridge_slave_0: entered allmulticast mode
[  153.672142][ T7974] bridge_slave_0: entered promiscuous mode
[  153.694947][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.697101][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.699613][ T7974] bridge_slave_1: entered allmulticast mode
[  153.709476][ T7974] bridge_slave_1: entered promiscuous mode
[  153.778060][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.792014][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.862696][ T7974] team0: Port device team_slave_0 added
[  153.870929][ T7974] team0: Port device team_slave_1 added
[  153.921546][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.924688][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.938406][ T7974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.942577][ T7974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.945378][ T7974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  153.953035][ T7974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.002282][ T7974] hsr_slave_0: entered promiscuous mode
[  154.008372][ T7974] hsr_slave_1: entered promiscuous mode
[  154.012985][ T7974] debugfs: 'hsr0' already exists in 'hsr'
[  154.020456][ T7974] Cannot create hsr debugfs directory
[  154.189199][ T8079] loop0: detected capacity change from 0 to 8192
[  154.260696][ T7974] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  154.279660][ T7974] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  154.308497][ T7974] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  154.328447][ T7974] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  154.486967][ T7974] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.516189][ T7974] 8021q: adding VLAN 0 to HW filter on device team0
[  154.526920][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.529545][ T6829] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.539341][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.542107][ T6829] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.555486][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  154.764550][ T7974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.966916][ T7974] veth0_vlan: entered promiscuous mode
[  154.987099][ T7974] veth1_vlan: entered promiscuous mode
[  155.004018][ T5199] Bluetooth: hci1: command tx timeout
[  155.040241][ T7974] veth0_macvtap: entered promiscuous mode
[  155.047227][ T7974] veth1_macvtap: entered promiscuous mode
[  155.076277][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.091335][ T7974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.114928][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.118146][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.126734][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.137201][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.202194][ T2897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.204995][ T2897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.230461][ T2897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.233553][ T2897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.591491][ T8136] x_tables: unsorted underflow at hook 1
[  155.633967][ T5199] Bluetooth: hci0: command 0x0406 tx timeout
[  155.646431][ T8138] capability: warning: `syz.4.808' uses 32-bit capabilities (legacy support in use)
[  155.704253][ T5971] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  155.863872][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  155.866859][ T5971] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  155.878535][ T5971] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  155.881434][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  155.894483][ T5971] usb 1-1: Product: syz
[  155.895940][ T5971] usb 1-1: Manufacturer: syz
[  155.903089][ T5971] usb 1-1: SerialNumber: syz
[  155.914726][ T5971] usb 1-1: config 0 descriptor??
[  155.918988][ T8132] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  156.017308][ T8143] loop4: detected capacity change from 0 to 40427
[  156.024921][ T8143] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(1)
[  156.027269][ T8143] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  156.031357][ T8143] F2FS-fs (loop4): invalid crc value
[  156.081195][ T8143] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.085579][ T8143] F2FS-fs (loop4): Start checkpoint disabled!
[  156.091289][ T8143] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  156.096188][ T8143] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  156.098160][ T8143] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  156.143066][ T5971] usb 1-1: USB disconnect, device number 10
[  157.075055][ T5950] Bluetooth: hci1: command tx timeout
[  157.489137][ T8191] loop3: detected capacity change from 0 to 4096
[  157.491977][ T8191] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  157.496230][ T8191] ntfs3(loop3): It is recommened to use chkdsk.
[  157.505335][  T793] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  157.545527][ T8171] loop4: detected capacity change from 0 to 65536
[  157.552292][ T8171] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  157.586601][ T8171] XFS (loop4): Ending clean mount
[  157.589109][ T8171] XFS (loop4): Quotacheck needed: Please wait.
[  157.633878][ T8171] XFS (loop4): Quotacheck: Done.
[  157.667170][  T793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.670259][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  157.676914][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  157.683893][  T793] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  157.692251][  T793] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  157.695809][  T793] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  157.700830][  T793] usb 1-1: Manufacturer: syz
[  157.705852][  T793] usb 1-1: config 0 descriptor??
[  157.713632][ T7974] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  158.084472][  T793] rc_core: IR keymap rc-hauppauge not found
[  158.086230][  T793] Registered IR keymap rc-empty
[  158.094412][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.116081][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.138603][  T793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  158.151343][  T793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  158.167942][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.202393][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.225095][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.253230][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.294000][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.299994][ T8214] loop4: detected capacity change from 0 to 128
[  158.308444][ T8214] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  158.317111][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.319728][ T8214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.344147][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.369400][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.400304][ T8216] loop4: detected capacity change from 0 to 128
[  158.405924][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.410040][ T8216] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.418951][ T8216] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  158.436213][  T793] mceusb 1-1:0.0: Error: mce write urb status = -71
[  158.446812][   T33] audit: type=1800 audit(2000000035.080:16): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.831" name="file1" dev="loop4" ino=12 res=0 errno=0
[  158.467429][  T793] mceusb 1-1:0.0: Registered ࠖ with mce emulator interface version 1
[  158.483769][  T793] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  158.552066][ T7974] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.645583][ T8220] loop3: detected capacity change from 0 to 128
[  158.757045][   T10] usb 1-1: USB disconnect, device number 11
[  158.787396][ T8224] loop3: detected capacity change from 0 to 1024
[  159.580455][ T8229] hfsplus: found bad thread record in catalog
[  159.586922][ T8229] hfsplus: found bad thread record in catalog
[  159.607797][ T5950] Bluetooth: hci1: command tx timeout
[  159.767351][   T33] audit: type=1800 audit(2000000036.400:17): pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.834" name="bus" dev="loop3" ino=26 res=0 errno=0
[  159.862905][ T2897] hfsplus: b-tree write err: -5, ino 4
[  159.867502][  T793] IPVS: starting estimator thread 0...
[  159.973861][ T8237] IPVS: using max 63 ests per chain, 151200 per kthread
[  160.708555][ T8249] loop0: detected capacity change from 0 to 512
[  160.713557][ T8249] EXT4-fs: Ignoring removed oldalloc option
[  160.717228][ T8249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  160.758347][ T8249] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.839: inode has both inline data and extents flags
[  160.762345][ T8249] EXT4-fs (loop0): Remounting filesystem read-only
[  160.765019][ T8249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.770497][ T8249] EXT4-fs (loop0): shut down requested (1)
[  160.781948][ T5945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.919394][ T8255] loop4: detected capacity change from 0 to 1
[  160.922578][ T8255] syz.4.841: attempt to access beyond end of device
[  160.922578][ T8255] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1
[  160.926552][ T8255] SQUASHFS error: Failed to read block 0x0: -5
[  160.928607][ T8255] unable to read squashfs_super_block
[  161.039394][  T794] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  161.199462][  T794] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  161.202902][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.208823][ T8257] loop4: detected capacity change from 0 to 1024
[  161.214639][  T794] usb 1-1: config 0 descriptor??
[  161.233214][  T794] cp210x 1-1:0.0: cp210x converter detected
[  161.332249][ T8260] gretap0: entered promiscuous mode
[  161.335173][ T8260] vlan2: entered promiscuous mode
[  161.365812][ T8262] loop4: detected capacity change from 0 to 256
[  161.371198][ T8262] exfat: Deprecated parameter 'utf8'
[  161.380476][ T8262] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  161.405366][   T33] audit: type=1804 audit(2000000038.030:18): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.844" name="/newroot/21/file1/file1" dev="loop4" ino=1048668 res=1 errno=0
[  161.639618][  T794] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  161.654731][  T794] usb 1-1: cp210x converter now attached to ttyUSB0
[  161.845229][  T794] usb 1-1: USB disconnect, device number 12
[  161.850183][  T794] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  161.859843][  T794] cp210x 1-1:0.0: device disconnected
[  161.887192][ T7878] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  162.065549][ T7878] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.070700][ T7878] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.073456][ T7878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.075855][ T7878] usb 4-1: Product: syz
[  162.077063][ T7878] usb 4-1: Manufacturer: syz
[  162.078422][ T7878] usb 4-1: SerialNumber: syz
[  162.513069][ T8284] loop4: detected capacity change from 0 to 8
[  162.530817][ T8284] SQUASHFS error: Unable to read directory block [631:72]
[  162.537139][ T8284] SQUASHFS error: Unable to read directory block [631:72]
[  162.619081][ T8288] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  162.629006][ T8288] overlayfs: missing 'lowerdir'
[  162.904841][ T5276] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  163.086285][ T5276] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  163.089285][ T5276] usb 1-1: config 0 has no interface number 0
[  163.093309][ T7878] cdc_ncm 4-1:1.0: bind() failure
[  163.104167][ T5276] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8
[  163.108724][ T7878] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  163.111293][ T7878] cdc_ncm 4-1:1.1: bind() failure
[  163.113927][ T5276] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  163.118389][ T5276] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8
[  163.129119][ T5276] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  163.134108][ T7878] usb 4-1: USB disconnect, device number 9
[  163.140566][ T5276] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8
[  163.146861][ T5276] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  163.153089][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.165490][ T5276] usb 1-1: config 0 descriptor??
[  163.170035][ T8290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  163.183487][ T5276] hub 1-1:0.3: bad descriptor, ignoring hub
[  163.188528][ T5276] hub 1-1:0.3: probe with driver hub failed with error -5
[  163.203235][ T5276] sierra 1-1:0.3: Sierra USB modem converter detected
[  163.278203][ T8311] loop4: detected capacity change from 0 to 2048
[  163.303064][ T8312] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.399359][ T5276] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  163.417281][ T5276] usb 1-1: Sierra USB modem converter now attached to ttyUSB1
[  163.458292][ T5276] usb 1-1: USB disconnect, device number 13
[  163.484082][ T5276] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  163.501235][ T5276] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  163.512339][ T5276] sierra 1-1:0.3: device disconnected
[  163.551488][ T8316] loop4: detected capacity change from 0 to 32768
[  163.570000][ T8316] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  163.597651][ T7974] ocfs2: Unmounting device (7,4) on (node local)
[  163.727360][ T8324] tipc: Started in network mode
[  163.729338][ T8324] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  163.732826][ T8324] tipc: New replicast peer: 0300:0000:0000:0000:0000:0000:0000:0001
[  163.737311][ T8324] tipc: Enabled bearer <udp:syz2>, priority 10
[  163.840401][   T12] bridge_slave_1: left allmulticast mode
[  163.842716][   T12] bridge_slave_1: left promiscuous mode
[  163.852549][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.031459][ T8334] loop0: detected capacity change from 0 to 2048
[  164.037979][ T8334] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  164.045196][ T8334] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.771618][ T8332] loop4: detected capacity change from 0 to 32768
[  164.791768][ T8332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.876 (8332)
[  164.872722][ T6030] tipc: Node number set to 1
[  164.902155][ T8332] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.913813][ T8332] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  164.944383][ T8344] loop3: detected capacity change from 0 to 764
[  165.016225][ T8344] Symlink component flag not implemented
[  165.026135][ T8344] Symlink component flag not implemented
[  165.042031][ T8344] Symlink component flag not implemented (129)
[  165.051132][ T8344] Symlink component flag not implemented (6)
[  165.156181][ T8332] BTRFS info (device loop4): setting nodatasum
[  165.163928][ T8332] BTRFS info (device loop4): allowing degraded mounts
[  165.166555][ T8332] BTRFS info (device loop4): enabling ssd optimizations
[  165.178159][ T8332] BTRFS info (device loop4): disabling tree log
[  165.180429][ T8332] BTRFS info (device loop4): turning on async discard
[  165.182444][ T8332] BTRFS info (device loop4): enabling free space tree
[  165.196559][ T8332] BTRFS info (device loop4): max_inline set to 0
[  165.206742][   T12] team0: Port device bond0 removed
[  165.221574][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  165.260467][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  165.315797][   T12] bond0 (unregistering): Released all slaves
[  165.378325][ T7974] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.824940][ T8369] loop3: detected capacity change from 0 to 4096
[  165.841913][ T8369] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  165.853498][ T8369] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  165.897279][ T8370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.957358][ T8369] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  165.976749][ T8369] Remounting filesystem read-only
[  165.979587][   T12] team0: Port device bond1 removed
[  165.983234][   T12] bond1 (unregistering): Released all slaves
[  166.058869][ T8368] loop4: detected capacity change from 0 to 32768
[  166.071367][ T8368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.885 (8368)
[  166.135625][ T8368] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.154452][ T8368] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  166.539557][ T8368] BTRFS info (device loop4): enabling ssd optimizations
[  166.542102][ T8368] BTRFS info (device loop4): turning on async discard
[  166.548924][   T12] hsr_slave_0: left promiscuous mode
[  166.551018][ T8368] BTRFS info (device loop4): enabling free space tree
[  166.555830][ T8407] loop0: detected capacity change from 0 to 128
[  166.564419][   T12] hsr_slave_1: left promiscuous mode
[  166.794872][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.797021][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.814257][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.816942][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.828615][   T12] veth1_macvtap: left promiscuous mode
[  166.830576][   T12] veth0_macvtap: left promiscuous mode
[  166.832364][   T12] veth1_vlan: left promiscuous mode
[  166.849566][   T12] veth0_vlan: left promiscuous mode
[  166.979277][ T8416] loop0: detected capacity change from 0 to 8
[  166.981282][ T7974] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.985535][ T8416] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  167.148333][ T8418] Bluetooth: MGMT ver 1.23
[  167.804936][  T794] IPVS: starting estimator thread 0...
[  167.898881][ T8432] IPVS: using max 63 ests per chain, 151200 per kthread
[  168.580375][ T8444] ceph: No mds server is up or the cluster is laggy
[  168.651673][ T7878] libceph: connect (1)[c::]:6789 error -101
[  168.663467][ T7878] libceph: mon0 (1)[c::]:6789 connect error
[  168.686702][ T8448] loop0: detected capacity change from 0 to 128
[  168.887693][   T12] team0 (unregistering): Port device team_slave_1 removed
[  168.929167][   T12] team0 (unregistering): Port device team_slave_0 removed
[  169.016097][ T8455] loop4: detected capacity change from 0 to 32768
[  169.023422][ T8455] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.905 (8455)
[  169.045699][ T8455] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.052210][ T8455] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  169.205631][ T8455] BTRFS info (device loop4): rebuilding free space tree
[  169.208040][ T8472] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  169.215044][ T8455] BTRFS info (device loop4): disabling free space tree
[  169.217134][ T8455] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.221517][ T8455] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.229452][ T8455] BTRFS info (device loop4): enabling ssd optimizations
[  169.231656][ T8455] BTRFS info (device loop4): turning on async discard
[  169.245682][ T8455] BTRFS info (device loop4): force clearing of disk cache
[  169.249758][ T8455] BTRFS info (device loop4): enabling auto defrag
[  169.255665][ T8455] BTRFS info (device loop4): max_inline set to 4096
[  169.471001][ T7974] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.802184][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'.
[  169.822054][ T8494] trusted_key: syz.0.915 sent an empty control message without MSG_MORE.
[  169.979935][ T6030] IPVS: starting estimator thread 0...
[  170.068053][   T12] IPVS: stop unused estimator thread 0...
[  170.073879][ T8510] IPVS: using max 63 ests per chain, 151200 per kthread
[  170.255504][ T8526] loop0: detected capacity change from 0 to 1024
[  170.322658][ T8507] loop4: detected capacity change from 0 to 32768
[  170.344675][   T33] audit: type=1800 audit(2000000046.970:19): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="file1" dev="loop4" ino=4 res=0 errno=0
[  170.367215][ T8507] ERROR: (device loop4): diWrite: ixpxd invalid
[  170.367215][ T8507] 
[  170.375781][ T8507] ERROR: (device loop4): remounting filesystem as read-only
[  170.379936][ T8507] ERROR: (device loop4): txCommit: 
[  170.379936][ T8507] 
[  170.386167][ T7878] kernel read not supported for file /input/mice (pid: 7878 comm: kworker/1:5)
[  170.465960][ T8532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.566514][ T8539] loop4: detected capacity change from 0 to 128
[  170.575986][ T8539] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  170.582638][ T8539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.396641][ T5950] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  171.399870][ T5950] Bluetooth: hci1: Injecting HCI hardware error event
[  171.404555][ T5199] Bluetooth: hci1: hardware error 0x00
[  171.562098][ T8560] syzkaller1: entered promiscuous mode
[  171.565902][ T8560] syzkaller1: entered allmulticast mode
[  171.629587][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  171.666920][ T8568] loop4: detected capacity change from 0 to 1024
[  172.126234][   T33] audit: type=1804 audit(2000000048.760:20): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.941" name="/newroot/56/file0/bus" dev="loop4" ino=26 res=1 errno=0
[  172.134833][   T33] audit: type=1800 audit(2000000048.760:21): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.941" name="bus" dev="loop4" ino=26 res=0 errno=0
[  172.159135][ T8573] Invalid ELF header magic: != ELF
[  172.161745][ T6030] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  172.170868][ T8573] hfsplus: found bad thread record in catalog
[  172.173372][ T8573] hfsplus: found bad thread record in catalog
[  172.388253][ T6030] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  172.392070][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.424556][ T6030] usb 4-1: Product: syz
[  172.426962][ T6030] usb 4-1: Manufacturer: syz
[  172.431498][ T6030] usb 4-1: SerialNumber: syz
[  172.462774][ T6030] usb 4-1: config 0 descriptor??
[  172.486208][ T6030] ems_usb 4-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  172.783537][ T6030] ems_usb 4-1:0.0: probe with driver ems_usb failed with error -22
[  172.808356][ T6829] hfsplus: b-tree write err: -5, ino 4
[  172.945819][ T6030] usb 4-1: USB disconnect, device number 10
[  173.139882][ T8582] loop4: detected capacity change from 0 to 32768
[  173.214859][ T8582] overlayfs: upper fs needs to support d_type.
[  173.216866][ T8582] overlayfs: upper fs does not support tmpfile.
[  173.222897][ T8582] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  173.228879][ T8582] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  173.228879][ T8582] 
[  173.236616][ T8582] ERROR: (device loop4): remounting filesystem as read-only
[  173.239279][ T8582] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  173.411601][ T8590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.950'.
[  173.455399][  T794] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  173.475762][ T5199] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  173.507447][ T8596] loop3: detected capacity change from 0 to 8
[  173.603850][  T794] usb 1-1: Using ep0 maxpacket: 16
[  173.618609][  T794] usb 1-1: config 0 has an invalid interface number: 107 but max is 0
[  173.618634][  T794] usb 1-1: config 0 has no interface number 0
[  173.618664][  T794] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255
[  173.622306][  T794] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  173.658833][  T794] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  173.661149][  T794] usb 1-1: Product: syz
[  173.663023][  T794] usb 1-1: Manufacturer: syz
[  173.665266][  T794] usb 1-1: SerialNumber: syz
[  173.668915][  T794] usb 1-1: config 0 descriptor??
[  173.671581][ T8586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  173.730314][ T8608] loop4: detected capacity change from 0 to 1024
[  173.777995][ T8608] hfsplus: found bad thread record in catalog
[  173.780492][ T8608] hfsplus: catalog searching failed
[  173.887447][  T794] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected
[  173.896688][  T794] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81
[  173.900368][  T720] hfsplus: found bad thread record in catalog
[  173.903344][  T720] hfsplus: found bad thread record in catalog
[  173.909872][  T794] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1
[  173.979451][  T794] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  173.987920][  T794] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2
[  174.004146][  T794] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  174.007612][  T794] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4
[  174.014139][  T794] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  174.024628][  T794] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6
[  174.028640][  T794] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  174.044082][  T794] usb 1-1: USB disconnect, device number 14
[  174.047928][  T794] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  174.058488][  T794] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  174.064672][  T794] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  174.076340][  T794] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  174.084685][  T794] keyspan 1-1:0.107: device disconnected
[  174.103948][ T5812] udevd[5812]: setting mode of /dev/bus/usb/001/014 to 020664 failed: No such file or directory
[  174.107005][ T5812] udevd[5812]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory
[  174.184532][ T8618] sctp: [Deprecated]: syz.3.961 (pid 8618) Use of int in max_burst socket option.
[  174.184532][ T8618] Use struct sctp_assoc_value instead
[  174.223032][ T8620] loop3: detected capacity change from 0 to 256
[  174.227092][ T8620] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  174.250470][ T2897] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  174.311845][ T8623] loop3: detected capacity change from 0 to 512
[  174.329115][ T8623] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  174.346284][ T8623] EXT4-fs (loop3): 1 truncate cleaned up
[  174.348808][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.381786][ T6883] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.467462][ T8628] loop3: detected capacity change from 0 to 128
[  174.483297][ T8628] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.513782][ T8628] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.563593][ T6883] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  174.718964][ T8645] loop3: detected capacity change from 0 to 256
[  174.832879][ T8649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.984402][ T8641] loop0: detected capacity change from 0 to 32768
[  175.003120][ T8641] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  175.059312][ T8641] XFS (loop0): Ending clean mount
[  175.094254][ T7878] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  175.111933][ T5945] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  175.262943][ T7878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.267000][ T7878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.270692][ T7878] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.295976][ T7878] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.299627][ T7878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.302684][ T7878] usb 5-1: Product: syz
[  175.306387][ T7878] usb 5-1: Manufacturer: syz
[  175.308167][ T7878] usb 5-1: SerialNumber: syz
[  175.316134][ T7878] cdc_ncm 5-1:1.0: skipping garbage
[  175.317901][ T7878] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  175.319878][ T7878] cdc_ncm 5-1:1.0: bind() failure
[  175.519134][ T7878] usb 5-1: USB disconnect, device number 2
[  175.604871][ T8675] loop3: detected capacity change from 0 to 32768
[  175.691315][   T33] audit: type=1800 audit(2000000052.320:22): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.982" name="file1" dev="loop3" ino=4 res=0 errno=0
[  176.082872][ T8682] loop4: detected capacity change from 0 to 64
[  176.210316][ T8675] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  176.210316][ T8675] 
[  176.217520][ T8675] ERROR: (device loop3): remounting filesystem as read-only
[  176.392135][ T6883] ------------[ cut here ]------------
[  176.394834][ T6883] kernel BUG at fs/jfs/inode.c:175!
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  176.398523][ T6883] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  176.402128][ T6883] CPU: 0 UID: 0 PID: 6883 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  176.405639][ T6883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.409257][ T6883] RIP: 0010:jfs_evict_inode+0x438/0x440
[  176.411329][ T6883] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f3 b3 e5 fe e9 16 fe ff ff e8 29 fa 7f fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  176.418364][ T6883] RSP: 0018:ffffc90003a47ae0 EFLAGS: 00010293
[  176.420621][ T6883] RAX: ffffffff83400c67 RBX: ffff8881bcbcd698 RCX: ffff8881681c3a00
[  176.423529][ T6883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881bcbcd698
[  176.426411][ T6883] RBP: 0000000000000001 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e
[  176.429298][ T6883] R10: dffffc0000000000 R11: ffffffff833fe8d0 R12: dffffc0000000000
[  176.432198][ T6883] R13: dffffc0000000000 R14: ffff8881bcbcd320 R15: ffffffff83400830
[  176.435124][ T6883] FS:  0000555573a41500(0000) GS:ffff88818eb3d000(0000) knlGS:0000000000000000
[  176.438347][ T6883] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.440677][ T6883] CR2: 00007fff2f4b6f18 CR3: 0000000110288000 CR4: 00000000000006f0
[  176.443567][ T6883] Call Trace:
[  176.444862][ T6883]  <TASK>
[  176.446050][ T6883]  ? evict+0x4f8/0x9c0
[  176.447606][ T6883]  ? __pfx_jfs_evict_inode+0x10/0x10
[  176.449490][ T6883]  evict+0x504/0x9c0
[  176.450840][ T6883]  ? __pfx_evict+0x10/0x10
[  176.452475][ T6883]  ? do_raw_spin_unlock+0x4d/0x240
[  176.454411][ T6883]  evict_inodes+0x64c/0x6d0
[  176.456107][ T6883]  ? __pfx_evict_inodes+0x10/0x10
[  176.457873][ T6883]  generic_shutdown_super+0x9a/0x2c0
[  176.459789][ T6883]  kill_block_super+0x44/0x90
[  176.461576][ T6883]  deactivate_locked_super+0xbc/0x130
[  176.463584][ T6883]  cleanup_mnt+0x425/0x4c0
[  176.465272][ T6883]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.467224][ T6883]  task_work_run+0x1d4/0x260
[  176.468872][ T6883]  ? __pfx_task_work_run+0x10/0x10
[  176.470723][ T6883]  ? __x64_sys_umount+0x122/0x160
[  176.472458][ T6883]  ? exit_to_user_mode_loop+0x40/0x130
[  176.474304][ T6883]  exit_to_user_mode_loop+0xe9/0x130
[  176.476245][ T6883]  do_syscall_64+0x2bd/0xfa0
[  176.477792][ T6883]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.480316][ T6883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.482450][ T6883]  ? exc_page_fault+0xab/0x100
[  176.484227][ T6883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.486142][ T6883] RIP: 0033:0x7f15fc9902f7
[  176.487595][ T6883] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  176.494423][ T6883] RSP: 002b:00007fff2f4b76c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  176.497210][ T6883] RAX: 0000000000000000 RBX: 00007f15fca11d7d RCX: 00007f15fc9902f7
[  176.501027][ T6883] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2f4b7780
[  176.504003][ T6883] RBP: 00007fff2f4b7780 R08: 0000000000000000 R09: 0000000000000000
[  176.506813][ T6883] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff2f4b8810
[  176.509529][ T6883] R13: 00007f15fca11d7d R14: 000000000002b067 R15: 00007fff2f4b8850
[  176.512365][ T6883]  </TASK>
[  176.513481][ T6883] Modules linked in:
[  176.516076][ T6883] ---[ end trace 0000000000000000 ]---
[  176.552171][ T6883] RIP: 0010:jfs_evict_inode+0x438/0x440
[  176.554694][ T6883] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f3 b3 e5 fe e9 16 fe ff ff e8 29 fa 7f fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  176.561766][ T6883] RSP: 0018:ffffc90003a47ae0 EFLAGS: 00010293
[  176.564353][ T6883] RAX: ffffffff83400c67 RBX: ffff8881bcbcd698 RCX: ffff8881681c3a00
[  176.567431][ T6883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881bcbcd698
[  176.570350][ T6883] RBP: 0000000000000001 R08: ffffffff8f7cdc77 R09: 1ffffffff1ef9b8e
[  176.573275][ T6883] R10: dffffc0000000000 R11: ffffffff833fe8d0 R12: dffffc0000000000
[  176.576451][ T6883] R13: dffffc0000000000 R14: ffff8881bcbcd320 R15: ffffffff83400830
[  176.579559][ T6883] FS:  0000555573a41500(0000) GS:ffff88818eb3d000(0000) knlGS:0000000000000000
[  176.582836][ T6883] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  176.585322][ T6883] CR2: 00007fff2f4b6f18 CR3: 0000000110288000 CR4: 00000000000006f0
[  176.588364][ T6883] Kernel panic - not syncing: Fatal exception
[  176.591144][ T6883] Kernel Offset: disabled
[  176.592720][ T6883] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:15:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a47230
R8 =ffff8881091d8237 R9 =1ffff1102123b046 R10=dffffc0000000000 R11=ffffffff8514d8e0
R12=dffffc0000000000 R13=ffffffff997d7930 R14=ffffffff99aeaf20 R15=0000000000000000
RIP=ffffffff8514d95c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555573a41500 ffffffff 00c00000
GS =0000 ffff88818eb3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff2f4b6f18 CR3=0000000110288000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f15fca1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff92000774dd6 RBX=ffffffff81000130 RCX=1ffff92000774d01 RDX=ffffffff90b04ff0
RSI=0000000000000002 RDI=ffffc90003ba7f40 RBP=dffffc0000000000 RSP=ffffc90003ba6d98
R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003ba6eb8 R11=ffffffff81ac2f50
R12=ffffc90003ba8000 R13=1ffff92000774dcf R14=ffffc90003ba6e68 R15=ffffc90003ba0000
RIP=ffffffff817398d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555579901500 ffffffff 00c00000
GS =0000 ffff8882a9f3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffed876ccb8 CR3=00000001a9c1c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff816921df ffffffff8167317f
XMM02=00007f58b3bb7498 ffffffff820f8f56 XMM03=00007f58b3bb74a8 00007f58b3bb74a0
XMM04=00007f58b471d100 00007f58b3bb7460 XMM05=00007f58b3bb7478 00007f58b3bb74c0
XMM06=00007f58b3bb74b8 00007f58b3bb74b0 XMM07=00007f58b3bb74a8 00007f58b3bb74a0
XMM08=b321a60000001000 00009e82078876b6 XMM09=0000000000000000 00007f58b3a1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
